Vulnerabilities

TI-2026-75399 CVE-2026-111613 · GHSA-33v5-488r-m83x

Unauthenticated JDBC injection in AllData exposes host files

HIGH 77

AllData through 0.7.1 contains an unauthenticated JDBC injection vulnerability that allows remote attackers to open arbitrary database connections by supplying jdbcUrl and jdbcDriverClass values to the data-dts /jobJdbcD…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00592 Published 2026-10-16 No fix listed CWE-306

TI-2026-16078 CVE-2026-19827 · GHSA-6gwh-89wg-9gmx

alldatacenter alldata logDetailCat Endpoint JobLogController.java FileInputStream path traversal

HIGH 70

A flaw has been found in alldatacenter alldata up to 0.6.8.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0069 Published 2026-08-14 No fix listed CWE-22

TI-2026-16077 CVE-2026-19826 · GHSA-fq8p-5fjc-mw7x

alldatacenter alldata xxl-rpc Listener HessianSerializer.java Hessian2Input.readObject deserialization

HIGH 70

A vulnerability was detected in alldatacenter alldata up to 0.6.8.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00564 Published 2026-08-14 No fix listed CWE-20

Vulnerabilities

Filters

Unauthenticated JDBC injection in AllData exposes host files

alldatacenter alldata logDetailCat Endpoint JobLogController.java FileInputStream path traversal

alldatacenter alldata xxl-rpc Listener HessianSerializer.java Hessian2Input.readObject deserialization